Fixed receipt verification

See which check passed.

These committed records are public, synthetic, and unsigned. No private key is loaded. Structural and hash integrity can pass while signature verification is skipped. Neither check establishes that a decision was correct.

Fixture tampered · integrity FAIL · signature SKIP

Structure, hash, fields, chain: FAIL
Signature: SKIP — no public key check
Scientific validity: NOT_EVALUATED
Action authority: NONE

Read package verifier report

- receipt[0]
    dsse:   PASS DSSE envelope well-formed (unsigned-honest, 0 signature(s))
    hash:   FAIL PAE sha256 mismatch: recomputed bce5c95b10d088cd49809656e8fbe3b19798801938e2e10040919afa9f2f775b != _pae_sha256 33eaf6388f6204e5e484fc8a8d2cb079004a4eaaf6a74bf96c516fa5755c3884
    fields: PASS decision fields OK (decision=allow, honest_blocked=False)
    sig:    SKIP UNSIGNED-honest envelope — nothing to verify (not a pass)
- receipt[1]
    dsse:   PASS DSSE envelope well-formed (unsigned-honest, 0 signature(s))
    hash:   PASS DSSE PAE sha256 verified (37379e56ccf64a49…)
    fields: PASS decision fields OK (decision=deny, honest_blocked=True)
    sig:    SKIP UNSIGNED-honest envelope — nothing to verify (not a pass)
- chain:  PASS hash chain intact across 2 receipt(s)

The package verifier can return true while signature verification is SKIP. An unsigned hash is not issuer authentication.